From 7005b528a3c36f8e094299fae4fb79677cb0ce9e Mon Sep 17 00:00:00 2001 From: anupamme Date: Mon, 31 Aug 2026 06:14:02 +0000 Subject: [PATCH] fix: V-001 security vulnerability Automated security fix generated by OrbisAI Security --- dist/jhs-enhance.user.js | 9 ++++++++- src/plugins/image-recognition.js | 9 ++++++++- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/dist/jhs-enhance.user.js b/dist/jhs-enhance.user.js index 05845db..754eb4a 100644 --- a/dist/jhs-enhance.user.js +++ b/dist/jhs-enhance.user.js @@ -10809,10 +10809,17 @@ ${err.stack}` : ""); type: mimeType }), formData = new FormData(); formData.append("image", blob); + const idKey = "jhs_imgurClientId"; + let clientId = localStorage.getItem(idKey); + if (!clientId) { + clientId = window.prompt("请输入您自己的Imgur Client-ID（可前往 https://api.imgur.com/oauth2/addclient 免费申请）用于图片上传搜索:"); + if (!clientId) throw new Error("未提供Imgur Client-ID，无法上传图片"); + localStorage.setItem(idKey, clientId); + } const response = await fetch("https://api.imgur.com/3/image", { method: "POST", headers: { - Authorization: "Client-ID d70305e7c3ac5c6" + Authorization: `Client-ID ${clientId}` }, body: formData }), data = await response.json(); diff --git a/src/plugins/image-recognition.js b/src/plugins/image-recognition.js index 86271ed..e635fd8 100644 --- a/src/plugins/image-recognition.js +++ b/src/plugins/image-recognition.js @@ -162,10 +162,17 @@ class ImageRecognitionPlugin extends BasePlugin { type: mimeType }), formData = new FormData; formData.append("image", blob); + const idKey = "jhs_imgurClientId"; + let clientId = localStorage.getItem(idKey); + if (!clientId) { + clientId = window.prompt("请输入您自己的Imgur Client-ID（可前往 https://api.imgur.com/oauth2/addclient 免费申请）用于图片上传搜索:"); + if (!clientId) throw new Error("未提供Imgur Client-ID，无法上传图片"); + localStorage.setItem(idKey, clientId); + } const response = await fetch("https://api.imgur.com/3/image", { method: "POST", headers: { - Authorization: "Client-ID d70305e7c3ac5c6" + Authorization: `Client-ID ${clientId}` }, body: formData }), data = await response.json();